Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS970.roa
File:                     AS970.roa (raw, json)
Hash identifier:          HS8I8uaFQEcdXjLzKUnQ8XT7DEXLa7nxcYtlXTZMCm0=
Subject key identifier:   0F:A0:4B:23:2D:A9:FC:9B:B5:5C:A8:55:00:F5:EB:7E:91:7F:93:F3
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       5D46B188CD79051A8517C58EAA81F022B33B9746
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS970.roa
Signing time:             Sat 08 Apr 2023 10:30:41 +0000
ROA not before:           Sat 08 Apr 2023 10:25:41 +0000
ROA not after:            Sat 06 Apr 2024 10:30:41 +0000
asID:                     970
IP address blocks:        2a12:dd47:8600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:46:b1:88:cd:79:05:1a:85:17:c5:8e:aa:81:f0:22:b3:3b:97:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 10:25:41 2023 GMT
            Not After : Apr  6 10:30:41 2024 GMT
        Subject: CN=0FA04B232DA9FC9BB55CA85500F5EB7E917F93F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:83:1b:6f:bb:e8:aa:83:64:ec:3e:8a:af:
                    8e:df:a6:ed:68:54:38:ef:ce:c6:fa:8d:79:7b:f8:
                    ba:98:c6:d5:16:ae:71:5c:2b:2c:0e:0a:ba:9e:18:
                    44:15:0b:14:63:fd:2d:e2:5b:dc:61:ac:44:4c:0e:
                    85:2e:b0:a4:eb:96:93:ad:2f:6e:5b:8e:cd:fe:ef:
                    65:12:5f:35:be:43:5b:e4:87:c6:dc:46:2e:8c:2b:
                    09:5c:70:d4:0e:21:77:3a:23:a3:82:fd:21:3b:c2:
                    81:51:d0:09:9e:45:08:12:4c:b3:f7:75:af:c2:12:
                    2a:7b:3c:bd:7a:b1:24:74:ce:98:a8:8a:72:a5:9f:
                    99:f9:69:76:72:d3:b5:28:e0:e0:f3:d1:59:74:d3:
                    e7:8a:7d:6c:99:10:46:60:30:59:02:6c:57:39:97:
                    43:89:1d:bc:ea:8b:f1:8c:98:9d:cf:9d:82:ed:f5:
                    69:84:96:4d:35:9e:9d:13:80:0d:a8:5f:6c:a3:2e:
                    c4:d2:6d:48:5f:56:c9:cb:41:2b:8c:23:8d:3e:f5:
                    bc:7b:45:f3:30:96:f7:35:1c:53:16:f5:77:e2:e6:
                    e1:e2:a6:f5:8b:7e:b3:a9:21:23:71:16:28:44:de:
                    6b:1c:be:d4:e9:1c:11:d7:6a:46:b8:78:ed:c7:e2:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A0:4B:23:2D:A9:FC:9B:B5:5C:A8:55:00:F5:EB:7E:91:7F:93:F3
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS970.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:48:1f:e0:5c:d4:75:60:cd:4f:ef:f8:0e:04:7b:a2:7a:
         6c:5d:a5:35:91:2d:67:ab:1a:b6:06:dc:f7:c2:3a:a0:bd:5d:
         e3:8b:d7:a6:b7:13:45:61:17:e8:41:19:78:e6:14:c6:e6:50:
         f9:8b:b7:b4:a7:1d:67:d5:80:50:fa:38:84:c2:20:bc:49:91:
         50:1d:5c:0f:8c:e5:7d:e4:d6:03:dd:46:ac:88:4e:91:20:6c:
         00:bd:0d:ad:08:d9:3e:f4:ef:12:67:a5:30:d7:41:8b:70:87:
         e9:a9:f9:f2:77:4e:17:22:b5:f5:69:10:bb:9d:a0:8f:9e:87:
         a1:f8:2e:9a:f2:7f:29:7e:11:72:0b:39:36:61:0b:7b:b2:81:
         b8:77:42:6b:c0:69:f9:64:dc:fe:78:e9:78:d6:f6:47:1e:48:
         a6:64:1c:59:23:b2:2a:55:a8:49:f0:0d:96:d9:d6:a0:c3:e8:
         c4:c4:8b:a6:29:b3:e9:0d:ad:9c:fb:17:d3:84:d4:be:6a:a7:
         b9:db:99:05:8d:07:30:9d:a5:6f:d6:b4:de:89:84:2c:51:26:
         e0:32:22:87:09:37:8a:18:35:84:0c:8a:d1:aa:57:86:df:1e:
         01:4a:f0:c4:92:3a:9d:4a:ad:f3:a5:00:73:b8:18:df:3b:d6:
         e7:a0:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----